This is an automated email from the ASF dual-hosted git repository.
sciabarracom pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/openserverless-admin-api.git
from da0280c Merge pull request #63 from
apache/dependabot/uv/werkzeug-3.1.9
add 69bcd19 fix tagging
add 58ccd6e fixed headers and license
add bd1c4ed removed conifg files
add a1a04a3 WARN removed
add 128d00d Merge remote-tracking branch 'origin/main' into 0.9.0
add a893520 Validate build inputs and isolate BuildKit workers on 0.9.0
add 3e1647e Merge pull request #60 from miki3421/security-0.9.0-builder
add 2ecb071 updated tag
add 59c8105 Require immutable OIDC identity binding before issuing tenant
credentials
add bab3543 Merge pull request #61 from
miki3421/security-0.9.0-sso-identity-binding
add f7cef92 Add Secret-authorized create-only tenant provisioning API
add 139fdc2 Add ASF header to user provisioning guide
add 26269bc Merge pull request #64 from
miki3421/feature/0.9.0-user-provisioning-447
add 3422b14 Merge branch 'main' into 0.9.0
new 17fdcef Merge pull request #65 from apache/0.9.0
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/image.yml | 2 +-
README.md | 4 +-
deploy/buildkit/buildkitd.toml | 4 +-
deploy/user-provisioning/rbac.yaml | 65 +++
docs/OIDC.md | 22 +
docs/USER_PROVISIONING.md | 211 ++++++++
openserverless/__init__.py | 5 +
openserverless/impl/auth/auth_service.py | 47 +-
openserverless/impl/builder/build_service.py | 43 +-
.../impl/provisioning/__init__.py | 4 -
openserverless/impl/provisioning/admission.py | 102 ++++
openserverless/impl/provisioning/kube_client.py | 81 +++
.../impl/provisioning/namespace_guard.py | 70 +++
openserverless/impl/provisioning/routes.py | 97 ++++
openserverless/impl/provisioning/user_service.py | 146 ++++++
openserverless/rest/build.py | 8 +-
openserverless/rest/users.py | 95 ++++
tests/test_auth_service_oidc.py | 24 +-
tests/test_build_api_security.py | 52 ++
tests/test_build_target_security.py | 76 +++
tests/test_sso_identity_binding.py | 141 ++++++
tests/test_user_provisioning.py | 543 +++++++++++++++++++++
22 files changed, 1810 insertions(+), 32 deletions(-)
create mode 100644 deploy/user-provisioning/rbac.yaml
create mode 100644 docs/USER_PROVISIONING.md
copy .dockerignore => openserverless/impl/provisioning/__init__.py (96%)
create mode 100644 openserverless/impl/provisioning/admission.py
create mode 100644 openserverless/impl/provisioning/kube_client.py
create mode 100644 openserverless/impl/provisioning/namespace_guard.py
create mode 100644 openserverless/impl/provisioning/routes.py
create mode 100644 openserverless/impl/provisioning/user_service.py
create mode 100644 openserverless/rest/users.py
create mode 100644 tests/test_build_api_security.py
create mode 100644 tests/test_build_target_security.py
create mode 100644 tests/test_sso_identity_binding.py
create mode 100644 tests/test_user_provisioning.py
